Security, permissions, and AI data handling
What Lumi can access in your store, what it sends to AI models to write drafts, and what it never touches. In plain language, with links to the policies that govern it.
The short version
Lumi reads and writes products and file alt text. It doesn't request customer or order records and installs nothing on your storefront. Product content and images you choose to draft are sent to AI model providers to generate drafts, and drafts from batches you start wait for your review.
Shopify permissions Lumi requests
The access the app asks you to approve at install, as listed on its Shopify App Store page.
| Permission | Why Lumi needs it |
|---|---|
| Read products | Find missing descriptions, alt text, and SEO fields, and read product details and images to draft from. |
| Write products | Publish approved descriptions, SEO titles, meta descriptions, and product image alt text, and restore eligible previous values. |
| Read files | Find images in Shopify Files that are missing alt text. |
| Write files | Publish approved alt text to images in Shopify Files. |
| Read metaobjects | Read the labels of metaobject values referenced by product metafields, so those facts can be used in description drafts. |
| Store owner details | Shopify lists the store owner's name, email, phone, and address as data this app can view. Lumi uses the store contact email for messages you turn on, such as the optional automation summary. |
What's sent to AI models
Only what a draft needs, only when you or your automation request one.
What's sent
Relevant catalog content for the products you select, their images, your brand guidance and writing rules, and the instructions that tell the model what to write.
Where it goes
Requests pass through an AI gateway to third-party model providers. The provider can vary with availability and the feature. Contact privacy@configurate.com for current provider details.
What to keep out
Don't put personal, confidential, or regulated data in product fields or brand guidance that you don't want processed for drafting.
What Lumi doesn't do
The limits are part of the design.
No storefront code
No scripts, widgets, overlays, or theme edits. Your storefront performance is unaffected.
No customer or order records
The core workflow doesn't request them. Lumi still responds to Shopify's mandatory privacy webhooks.
No silent publishing from batches you start
They always create drafts. Optional Maintain automation can publish after you opt in, and you choose drafts or publishing.
No image file changes
Lumi updates alt text fields only. It never edits, compresses, or replaces images.
When you uninstall
What stays, and what Lumi deletes.
Your content stays
Everything you published through Lumi remains in your Shopify fields.
Access ends
Uninstalling revokes Lumi's Shopify access and starts deletion of shop-scoped app data, keeping only limited records needed for billing, security, and legal reasons.
Trust questions
Does Lumi access my customers' data?
Lumi's core workflow doesn't request customer or order records. It works with products, product images, and Shopify Files.
Can I see what Lumi changed?
Yes. Published changes lists what Lumi published with before and after values where saved, and every plan can export it as a CSV.
Who do I contact about privacy or a data request?
Email privacy@configurate.com. For security questions, email lumi@configurate.com.
See it on your own store
Install free and review the permissions in Shopify before approving.